⬆️(dependencies) Pin dependencies by renovate[bot] · Pull Request #2245 · suitenumerique/docs

renovate · 2026-04-28T10:27:41Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	pinDigest	→ `27d5ce7`
actions/cache	action	major	`v4` → `v5`
actions/checkout	action	pinDigest	→ `de0fac2`
actions/setup-node	action	pinDigest	→ `48b55a0`
actions/setup-python	action	pinDigest	→ `a309ff8`
actions/upload-artifact	action	major	`v6` → `v7`
azure/setup-helm	action	major	`v4` → `v5`
crowdin/github-action	action	pinDigest	→ `8868a33`
docker/build-push-action	action	major	`v6` → `v7`
docker/login-action	action	major	`v3` → `v4`
docker/metadata-action	action	major	`v5` → `v6`
docker/setup-buildx-action	action	major	`v3` → `v4`
docker/setup-qemu-action	action	major	`v3` → `v4`
dorny/paths-filter	action	major	`v3` → `v4`
node	uses-with	major	`22.x` → `24.x`
numerique-gouv/action-argocd-webhook-notification	action	pinDigest	→ `cac2ee6`
numerique-gouv/helm-gh-pages	action	pinDigest	→ `2cf477a`
peter-evans/create-pull-request	action	major	`v7` → `v8`
postgres	service	major	`16` → `18`
preactjs/compressed-size-action	action	pinDigest	→ `66325aa`
python	uses-with	minor	`3.13.3` → `3.14.4`
thollander/actions-comment-pull-request	action	pinDigest	→ `24bffb9`

Release Notes

actions/cache (actions/cache)

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

`v5.0.4`

Compare Source

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: actions/cache@v4...v4.3.0

`v4.2.4`

Compare Source

What's Changed

Update README.md by @nebuk89 in #1620
Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in #1634
Prepare release 4.2.4 by @Link- in #1636

New Contributors

@nebuk89 made their first contribution in #1620

Full Changelog: actions/cache@v4...v4.2.4

`v4.2.3`

Compare Source

What's Changed

Update to use @actions/cache 4.0.3 package & prepare for new release by @salmanmkc in #1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

@salmanmkc made their first contribution in #1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

`v4.2.2`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Bump @actions/cache to v4.0.2 by @robherley in #1560

Full Changelog: actions/cache@v4.2.1...v4.2.2

`v4.2.1`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

docs: GitHub is spelled incorrectly in caching-strategies.md by @janco-absa in #1526
docs: Make the "always save prime numbers" example more clear by @Tobbe in #1525
Update force deletion docs due a recent deprecation by @sebbalex in #1500
Bump @actions/cache to v4.0.1 by @robherley in #1554

New Contributors

@janco-absa made their first contribution in #1526
@Tobbe made their first contribution in #1525
@sebbalex made their first contribution in #1500

Full Changelog: actions/cache@v4.2.0...v4.2.1

`v4.2.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4.1.2...v4.2.0

`v4.1.2`

Compare Source

What's Changed

Add Bun example by @idleberg in #1456
Revise isGhes logic by @jww3 in #1474
Bump braces from 3.0.2 to 3.0.3 by @dependabot in #1475
Add dependabot.yml to enable automatic dependency upgrades by @Link- in #1476
Bump actions/checkout from 3 to 4 by @dependabot in #1478
Bump actions/stale from 3 to 9 by @dependabot in #1479
Bump github/codeql-action from 2 to 3 by @dependabot in #1483
Bump actions/setup-node from 3 to 4 by @dependabot in #1481
Prepare 4.1.2 release by @Link- in #1477

New Contributors

@idleberg made their first contribution in #1456
@jww3 made their first contribution in #1474
@Link- made their first contribution in #1476

Full Changelog: actions/cache@v4.1.1...v4.1.2

`v4.1.1`

Compare Source

What's Changed

Restore original behavior of cache-hit output by @joshmgross in #1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

`v4.1.0`

Compare Source

What's Changed

Fix cache-hit output when cache missed by @fchimpan in #1404
Deprecate save-always input by @joshmgross in #1452

New Contributors

@ottlinger made their first contribution in #1437
@Olegt0rr made their first contribution in #1377
@fchimpan made their first contribution in #1404
@x612skm made their first contribution in #1434
@todgru made their first contribution in #1311
@Jcambass made their first contribution in #1463
@mackey0225 made their first contribution in #1462
@quatquatt made their first contribution in #1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

`v4.0.2`

Compare Source

What's Changed

Fix fail-on-cache-miss not working by @cdce8p in #1327

Full Changelog: actions/cache@v4.0.1...v4.0.2

`v4.0.1`

Compare Source

What's Changed

Update README.md by @yacaovsnc in #1304
Update examples by @yacaovsnc in #1305
Update actions/cache publish flow by @bethanyj28 in #1340
Update @actions/cache by @bethanyj28 in #1341

New Contributors

@yacaovsnc made their first contribution in #1304

Full Changelog: actions/cache@v4...v4.0.1

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v7`

Compare Source

azure/setup-helm (azure/setup-helm)

`v5`

Compare Source

`v5.0.0`

Compare Source

Changed

`v4.3.1`

Compare Source

Changed

Added

#197 Add pre-commit hook

`v4.3.0`

Compare Source

#152 feat: log when restoring from cache
#157 Dependencies Update
#137 Add dependabot

`v4.2.0`

Compare Source

#124 Fix OS detection and download OS-native archive extension

`v4.1.0`

Compare Source

#130 switches to use Helm published file to read latest version instead of using GitHub releases

docker/build-push-action (docker/build-push-action)

`v7.1.0`

Compare Source

Git context query format support by @crazy-max in #1505
Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in #1505
Bump brace-expansion from 1.1.12 to 1.1.13 in #1500
Bump fast-xml-parser from 5.4.2 to 5.5.7 in #1489
Bump flatted from 3.3.3 to 3.4.2 in #1491
Bump glob from 10.3.12 to 10.5.0 in #1490
Bump handlebars from 4.7.8 to 4.7.9 in #1497
Bump lodash from 4.17.23 to 4.18.1 in #1510
Bump picomatch from 4.0.3 to 4.0.4 in #1496
Bump undici from 6.23.0 to 6.24.1 in #1486
Bump vite from 7.3.1 to 7.3.2 in #1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #1470
Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in #1473
Remove legacy export-build tool support for build summary by @crazy-max in #1474
Switch to ESM and update config/test wiring by @crazy-max in #1466
Bump @actions/core from 1.11.1 to 3.0.0 in #1454
Bump @docker/actions-toolkit from 0.62.1 to 0.79.0 in #1453 #1472 #1479
Bump minimatch from 3.1.2 to 3.1.5 in #1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

`v7`

Compare Source

`v6.19.2`

Compare Source

Preserve port in GIT_AUTH_TOKEN host by @crazy-max in #1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

`v6.19.1`

Compare Source

Derive GIT_AUTH_TOKEN host from GitHub server URL by @crazy-max in #1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

`v6.19.0`

Compare Source

Scope default git auth token to github.com by @crazy-max in #1451
Bump brace-expansion from 1.1.11 to 1.1.12 in #1396
Bump form-data from 2.5.1 to 2.5.5 in #1391
Bump js-yaml from 3.14.1 to 3.14.2 in #1429
Bump lodash from 4.17.21 to 4.17.23 in #1446
Bump tmp from 0.2.3 to 0.2.4 in #1398
Bump undici from 5.28.4 to 5.29.0 in #1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

`v6.18.0`

Compare Source

Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in #1381

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

`v6.17.0`

Compare Source

Bump @docker/actions-toolkit from 0.59.0 to 0.61.0 by @crazy-max in #1364

[!NOTE]
Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

`v6.16.0`

Compare Source

Handle no default attestations env var by @crazy-max in #1343
Only print secret keys in build summary output by @crazy-max in #1353
Bump @docker/actions-toolkit from 0.56.0 to 0.59.0 in #1352

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

`v6.15.0`

Compare Source

Bump @docker/actions-toolkit from 0.55.0 to 0.56.0 in #1330

Full Changelog: docker/build-push-action@v6.14.0...v6.15.0

`v6.14.0`

Compare Source

Bump @docker/actions-toolkit from 0.53.0 to 0.55.0 in #1324

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

`v6.13.0`

Compare Source

Bump @docker/actions-toolkit from 0.51.0 to 0.53.0 in #1308

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

`v6.12.0`

Compare Source

Bump @docker/actions-toolkit from 0.49.0 to 0.51.0 in #1300

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

`v6.11.0`

Compare Source

Handlebar defaultContext support for build-contexts input by @crazy-max in #1283
Bump @docker/actions-toolkit from 0.46.0 to 0.49.0 in #1281

Full Changelog: docker/build-push-action@v6.10.0...v6.11.0

`v6.10.0`

Compare Source

Add call input to set method for evaluating build by @crazy-max in #1265
Bump @actions/core from 1.10.1 to 1.11.1 in #1238
Bump @docker/actions-toolkit from 0.39.0 to 0.46.0 in #1268
Bump cross-spawn from 7.0.3 to 7.0.6 in #1261

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

`v6.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.38.0 to 0.39.0 in #1234
Bump path-to-regexp from 6.2.2 to 6.3.0 in #1232

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

`v6.8.0`

Compare Source

Bump @docker/actions-toolkit from 0.37.1 to 0.38.0 in #1230

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

`v6.7.0`

Compare Source

Print info message for build summary support checks by @crazy-max in #1211

Full Changelog: docker/build-push-action@v6.6.1...v6.7.0

`v6.6.1`

Compare Source

Bump @docker/actions-toolkit from 0.37.0 to 0.37.1 in #1205

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

`v6.6.0`

Compare Source

Generate GitHub annotations for build checks by @crazy-max in #1197
Bump @docker/actions-toolkit from 0.35.0 to 0.37.0 in #1196 #1198

Full Changelog: docker/build-push-action@v6.5.0...v6.6.0

`v6.5.0`

Compare Source

Bump @docker/actions-toolkit from 0.33.0 to 0.35.0 in #1186 #1191

Full Changelog: docker/build-push-action@v6.4.1...v6.5.0

`v6.4.1`

Compare Source

revert "Set repository and ghtoken attributes for GitHub Actions cache backend" by @crazy-max in #1183

Full Changelog: docker/build-push-action@v6.4.0...v6.4.1

`v6.4.0`

Compare Source

Set repository and ghtoken attributes for GitHub Actions cache backend by @crazy-max in #1133
Bump @docker/actions-toolkit from 0.31.0 to 0.33.0 in #1179

Full Changelog: docker/build-push-action@v6.3.0...v6.4.0

`v6.3.0`

Compare Source

DOCKER_BUILD_RECORD_UPLOAD environment variable to enable/disable build record upload by @crazy-max in #1172
DOCKER_BUILD_NO_SUMMARY has been deprecated. Set DOCKER_BUILD_SUMMARY to false instead by @crazy-max in #1170 #1173
Bump @docker/actions-toolkit from 0.28.0 to 0.31.0 in #1171 #1159 #1169

Full Changelog: docker/build-push-action@v6.2.0...v6.3.0

`v6.2.0`

Compare Source

Use default retention days for build export artifact by @crazy-max in #1153
Bump @docker/actions-toolkit from 0.27.0 to 0.28.0 in #1158

Full Changelog: docker/build-push-action@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.26.2 to 0.27.0 in #1149

Full Changelog: docker/build-push-action@v6.0.2...v6.1.0

`v6.0.2`

Compare Source

Bump @docker/actions-toolkit from 0.26.1 to 0.26.2 in #1147

Full Changelog: docker/build-push-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

Bump @docker/actions-toolkit from 0.26.0 to 0.26.1 in #1142

Full Changelog: docker/build-push-action@v6.0.0...v6.0.1

docker/login-action (docker/login-action)

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

`v4`

Compare Source

`v3.7.0`

Compare Source

Add scope input to set scopes for the authentication token by @crazy-max in #912
Add support for AWS European Sovereign Cloud ECR by @dphi in #914
Ensure passwords are redacted with registry-auth input by @crazy-max in #911
build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Bump @actions/core from 1.10.1 to 1.11.1 in #791
Bump @aws-sdk/client-ecr to 3.766.0 in #789 #856
Bump @aws-sdk/client-ecr-public to 3.758.0 in #789 #856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in #801 #806 #858
Bump cross-spawn from 7.0.3 to 7.0.6 in #814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in #823
Bump path-to-regexp from 6.2.2 to 6.3.0 in #777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

`v3.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.24.0 to 0.35.0 in #754
Bump https-proxy-agent from 7.0.4 to 7.0.5 in #741
Bump braces from 3.0.2 to 3.0.3 in #730

Full Changelog: docker/login-action@v3.2.0...v3.3.0

[`v3.2.0`](https://redirect.github.com/docker/lo

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 7am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added automated Pull request created automatically dependencies Pull requests that update a dependency file noChangeLog labels Apr 28, 2026

⬆️(dependencies) Pin dependencies

ec165e2

renovate Bot force-pushed the renovate/github-actions-dependencies branch from 0a4a1db to ec165e2 Compare May 4, 2026 02:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

⬆️(dependencies) Pin dependencies#2245

⬆️(dependencies) Pin dependencies#2245
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github-actions-dependencies

renovate Bot commented Apr 28, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

⚠️ Important Changes

Minor changes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

Changed

Changed

Added

[v3.2.0](https://redirect.github.com/docker/lo

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 28, 2026 •

edited

Loading

[`v3.2.0`](https://redirect.github.com/docker/lo